1. Introduction & Data Controller
    This Privacy Policy explains how www.shadeandbreeze.com (operating under the brand name Shadeandbreeze, hereinafter referred to as “we”, “us”, or “our”) collects, uses, processes, and protects personal information obtained from individuals visiting or purchasing from our website.

For the purpose of applicable data protection legislation—including the EU General Data Protection Regulation (GDPR) and the Singapore Personal Data Protection Act (PDPA)—the data controller responsible for your personal information is www.shadeandbreeze.com.

Contact Details of the Data Controller:

Postal Address: 10 Ubi Crescent, #05-090, Ubi Techpark, Singapore 408564

Contact Email: monitor@shadeandbreeze.com

Telephone: +65 67439162

  1. Information We Collect
    We collect personal information necessary to fulfill customer orders, manage account communications, and comply with legal requirements. The types of data collected include:

Identity & Contact Information: Full name, shipping address, billing address, contact telephone number, and email address.

Order & Transaction Details: Records of items purchased, purchase dates, order totals, and fulfillment status.

Payment Processing Data: Payment verification data required to complete transactions (handled strictly via external payment providers as specified below).

Technical Data: IP address, browser type, operating system, and general access logs collected automatically during site navigation.

  1. Legal Basis and Purpose of Data Processing
    We collect and process your personal data under the following legal bases:

Performance of Contract: Processing is necessary to complete customer sales, manage order fulfillment, arrange delivery, and provide standard post-purchase support.

Legal Obligation: Processing is necessary to retain accurate financial, accounting, and tax records required by Singaporean and European statutory regulations.

Legitimate Interests: Processing is necessary to maintain standard site operational stability, prevent fraud, and maintain effective customer communication.

  1. Third-Party Payment Processing (Stripe)
    We do not directly collect, store, or process full payment card details on our servers.

All financial transactions conducted on www.shadeandbreeze.com are processed directly through our authorized payment service provider, Stripe. When you place an order, your payment credentials are provided directly to Stripe, whose collection and handling of your financial information is governed by their independent privacy statement and regulatory compliance frameworks. Stripe provides encryption protocols and compliance measures to safeguard transactional data.

  1. Third-Party Service Providers & Data Transfers
    To deliver your purchases effectively, limited customer data (such as recipient name, delivery address, and contact number) is shared strictly with necessary operational service providers, including postal services, commercial couriers, and essential hosting software infrastructure.

Where personal information is transferred outside Singapore or the European Economic Area (EEA), we ensure appropriate transfer mechanisms and standard contractual protections are applied to maintain data integrity and protection standards consistent with applicable privacy regulations.

  1. Data Retention Period
    We retain personal information only for as long as necessary to fulfill the operational purposes for which it was collected, or to satisfy applicable legal, statutory, tax, and accounting reporting standards.

Order & Transaction Records: Retained for a standard period of 7 years following order completion to satisfy Singapore tax regulations and relevant statutory accounting requirements in European jurisdictions.

General Customer Inquiries: Retained for up to 24 months from the date of final communication, after which emails and records are securely deleted or anonymized.

Technical & Access Logs: Retained for a maximum of 12 months for operational security and traffic evaluation before automatic deletion.

Upon expiration of the defined retention periods, personal data is permanently deleted or securely rendered non-identifiable.

  1. Your Data Protection Rights
    Under Singapore PDPA and European GDPR regulations, you hold explicit rights regarding your personal information:

Right of Access: You may request details of the personal data held about you.

Right to Rectification: You may request corrections to inaccurate or incomplete personal records.

Right to Erasure: You may request the deletion of your personal data where statutory retention obligations no longer apply.

Right to Restrict or Object: You may object to specific processing activities based on legitimate interests.

Right to Data Portability: You may request a copy of your personal data in a structured, standard format.

To exercise any of thes

e rights, please submit a written request to our Data Protection Contact at monitor@shadeandbreeze.com. We will evaluate and address your request within statutory timeframes.

Updates to This Privacy Policy
We reserve the right to revise or update this Privacy Policy to maintain compliance with relevant legal requirements or site operational adjustments. Any revised version will be published directly on this page with an updated effective date.